【问题标题】:ADFS Error EventId: 111ADFS 错误事件 ID:111
【发布时间】:2015-02-04 22:01:41
【问题描述】:

这个错误让我疯了两天!

我有一个 web 服务器和一个 adfs 服务器(都是 windows server 2012)。我正确配置了 adfs。我可以看到 adfs/ls 身份验证页面,并且可以使用 AD 用户从 adfs 服务器登录。当我尝试从 Web 服务器访问 adfs/ls 身份验证页面时,会正确重定向到 adfs 服务器,因此我可以输入我的用户名和密码。什么时候回来我在页面上收到此错误:

There was a problem accessing the site. Try to browse to the site again.
If the problem persists, contact the administrator of this site and provide the reference number to identify the problem.
Authentication failed. Close the browser and try again, or contact your administrator for more information.
Reference number: 8949f368-ee3b-4c94-a749-63950dfc42b9

在 adfs 服务器上我有这个事件 id 111:

The Federation Service encountered an error while processing the WS-Trust request. 
Request type: http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue 

Additional Data 
Exception details: 
Microsoft.IdentityServer.Framework.SecurityTokenService.FailedAuthenticationException: MSIS3055: The requested relying party trust 'http://myserver.com/MyApplication' is unspecified or unsupported. If a relying party trust was specified, it is possible the user does not have permission to access the relying party trust. ---> Microsoft.IdentityServer.Service.Policy.PolicyServer.Engine.ScopeNotFoundPolicyRequestException: MSIS3020: The relying party trust with identifier 'http://myserver.com/MyApplication' could not be located.
   --- End of inner exception stack trace ---
   at System.IdentityModel.AsyncResult.End(IAsyncResult result)
   at System.ServiceModel.Security.WSTrustServiceContract.ProcessCoreAsyncResult.End(IAsyncResult ar)
   at System.ServiceModel.Security.WSTrustServiceContract.EndProcessCore(IAsyncResult ar, String requestAction, String responseAction, String trustNamespace)

Microsoft.IdentityServer.Service.Policy.PolicyServer.Engine.ScopeNotFoundPolicyRequestException: MSIS3020: The relying party trust with identifier 'http://myserver.com/MyApplication' could not be located.

在两台服务器中都配置了依赖方信任,证书也是正确的,但显然缺少某些内容或错误。任何帮助将非常感激!

【问题讨论】:

    标签: adfs adfs2.0 adfs2.1


    【解决方案1】:

    造成这种情况的正常原因是应用程序中的 WIF 领域。 web.config 与 ADFS RP 标识符选项卡中的字符串不匹配。

    这包括尾随的斜杠!

    你有:

    http://myserver.com/MyApplication 在 ADFS 中

    你是不是这样配置的:

    http://myserver.com/MyApplication/ 在 WIF 中?

    【讨论】:

    • 我仍然遇到这个问题:(我是新来的,你能解释一下在哪里检查 WIF 以及在哪里检查 ADFS?谢谢!
    • 我现在明白你的意思了,问题是,如何在 Identifiers 选项卡中添加此 URL??
    • 在框中输入并点击“添加”。
    • 嘿,鲁本,你明白了吗?
    猜你喜欢
    • 1970-01-01
    • 2015-02-06
    • 1970-01-01
    • 1970-01-01
    • 1970-01-01
    • 2018-04-22
    • 1970-01-01
    • 2015-08-09
    • 1970-01-01
    相关资源
    最近更新 更多